Skip to main content
POST /v1/certify Applies a PKCS#7 certification signature to an existing PDF. See Digital Certification for what certification proves and its limits. Each successful call is one operation.

Request body

* Pass certificateId, or both certificate and privateKey. With certificateId, inline PEM is ignored.
The hosted API reads the inline PEM from certificate and privateKey. The names certificatePem and privateKeyPem, which the self-hosted server also accepts, return 400 on the hosted API.
The hosted endpoint applies an invisible signature. The visible, x, y, width, and height fields of the self-hosted endpoint are not supported here. For a visible signature, certify at render time with the certification prop. See Digital Certification.

With a saved certificate

Upload the certificate and key once on the Credentials page of the Dashboard. Then send only the ID. The private key does not travel with each request.
Get certificate IDs from GET /v1/certificates. See Resources.

With inline PEM


Response

200 OK, Content-Type: application/pdf. The body is the certified PDF. It is not saved to Documents.